About us

A battle-tested consultancy, with its own intelligence

An elite cybersecurity consultancy with LATAM expertise and global reach. Offensive operators, incident response, and proprietary threat intelligence. We bring together top-tier offensive operators, a detection and response practice, and a CTI platform we run ourselves.

37
Verified offensive certifications
10
Certifying bodies
6
Areas of specialization
100%
Hands-on certifications, not theory
How we work

Our principles

Findings, not PDFs

Every engagement ends with prioritized, reproducible actions, plus a retest to validate remediation.

Real operators

Former offensive operators and incident responders with published CVEs and real-world combat experience. You work directly with the people doing the work.

LATAM depth

Native coverage of the Spanish- and Portuguese-speaking underground, and fluency in the region’s regulations.

The flywheel

Our services feed Shadow Intel with data; the platform produces the intelligence that steers our services.

Credentials

Certified on every front

37 active, verifiable offensive security certifications across the team, spanning red teaming and web exploitation to mobile, API, and AI penetration testing. Official badges, each verifiable by ID. We don't collect acronyms: every credential backs a service we deliver.

Red Team & Active Directory8
Web, AppSec & API9
Pentesting & Networks11
Mobile5
AI / ML Security2
Blue Team & Forensics2

Full-chain red team operations, Active Directory compromise, lateral movement, and offensive infrastructure development.

37 credentials, each verifiable by ID
Red Team & Active Directory
CRTS V2 — CyberWarFare Labs
CRTS V2
Certified Red Team Specialist V2
CyberWarFare Labs · 2026
AD-RTS — CyberWarFare Labs
K8s-RTA — CyberWarFare Labs
CRT-ID — CyberWarFare Labs
CELMS — CyberWarFare Labs
CRT-COI — CyberWarFare Labs
CRTP — INE / Pentester Academy
CRTA — CyberWarFare Labs
08certs
All 37 credentials
CRTS V2 — CyberWarFare Labs
CRTS V2
CyberWarFare Labs
K8s-RTA — CyberWarFare Labs
K8s-RTA
CyberWarFare Labs
CELMS — CyberWarFare Labs
CELMS
CyberWarFare Labs
CRTP — INE / Pentester Academy
CRTP
INE / Pentester Academy
eWPTXv3 — INE Security
eWPTXv3
INE Security
CAPen — The SecOps Group
CAPen
The SecOps Group
ASCP — APIsec University
ASCP
APIsec University
CASA — APIsec University
CASA
APIsec University
eWPT — INE Security
eWPT
INE Security
PNPT — TCM Security
PNPT
TCM Security
CNPen — The SecOps Group
CNPen
The SecOps Group
eCPPT — INE Security
eCPPT
INE Security
C)PTE — Mile2
C)PTE
Mile2
CEH Practical — EC-Council
CEH Practical
EC-Council
eMAPTv2 — INE Security
eMAPTv2
INE Security
CMPen-iOS — The SecOps Group
CMPen-iOS
The SecOps Group
eMAPT — INE Security
eMAPT
INE Security
C-AgAIPen — The SecOps Group
C-AgAIPen
The SecOps Group
BTF — CyberWarFare Labs
BTF
CyberWarFare Labs
CRTS V2 — CyberWarFare Labs
CRTS V2
CyberWarFare Labs
K8s-RTA — CyberWarFare Labs
K8s-RTA
CyberWarFare Labs
CELMS — CyberWarFare Labs
CELMS
CyberWarFare Labs
CRTP — INE / Pentester Academy
CRTP
INE / Pentester Academy
eWPTXv3 — INE Security
eWPTXv3
INE Security
CAPen — The SecOps Group
CAPen
The SecOps Group
ASCP — APIsec University
ASCP
APIsec University
CASA — APIsec University
CASA
APIsec University
eWPT — INE Security
eWPT
INE Security
PNPT — TCM Security
PNPT
TCM Security
CNPen — The SecOps Group
CNPen
The SecOps Group
eCPPT — INE Security
eCPPT
INE Security
C)PTE — Mile2
C)PTE
Mile2
CEH Practical — EC-Council
CEH Practical
EC-Council
eMAPTv2 — INE Security
eMAPTv2
INE Security
CMPen-iOS — The SecOps Group
CMPen-iOS
The SecOps Group
eMAPT — INE Security
eMAPT
INE Security
C-AgAIPen — The SecOps Group
C-AgAIPen
The SecOps Group
BTF — CyberWarFare Labs
BTF
CyberWarFare Labs
AD-RTS — CyberWarFare Labs
AD-RTS
CyberWarFare Labs
CRT-ID — CyberWarFare Labs
CRT-ID
CyberWarFare Labs
CRT-COI — CyberWarFare Labs
CRT-COI
CyberWarFare Labs
CRTA — CyberWarFare Labs
CRTA
CyberWarFare Labs
CAPenX — The SecOps Group
CAPenX
The SecOps Group
Web-RTA — CyberWarFare Labs
Web-RTA
CyberWarFare Labs
API-RTA — CyberWarFare Labs
API-RTA
CyberWarFare Labs
CAP — The SecOps Group
CAP
The SecOps Group
OSCP — OffSec
OSCP
OffSec
OSWP — OffSec
OSWP
OffSec
CNSP — The SecOps Group
CNSP
The SecOps Group
CJCA — Hack The Box
CJCA
Hack The Box
C)PTC — Mile2
C)PTC
Mile2
eJPT — INE Security
eJPT
INE Security
PMPA — TCM Security
PMPA
TCM Security
CMPen-And — The SecOps Group
CMPen-And
The SecOps Group
C-AI/MLPen — The SecOps Group
C-AI/MLPen
The SecOps Group
CDFP — INE Security
CDFP
INE Security
AD-RTS — CyberWarFare Labs
AD-RTS
CyberWarFare Labs
CRT-ID — CyberWarFare Labs
CRT-ID
CyberWarFare Labs
CRT-COI — CyberWarFare Labs
CRT-COI
CyberWarFare Labs
CRTA — CyberWarFare Labs
CRTA
CyberWarFare Labs
CAPenX — The SecOps Group
CAPenX
The SecOps Group
Web-RTA — CyberWarFare Labs
Web-RTA
CyberWarFare Labs
API-RTA — CyberWarFare Labs
API-RTA
CyberWarFare Labs
CAP — The SecOps Group
CAP
The SecOps Group
OSCP — OffSec
OSCP
OffSec
OSWP — OffSec
OSWP
OffSec
CNSP — The SecOps Group
CNSP
The SecOps Group
CJCA — Hack The Box
CJCA
Hack The Box
C)PTC — Mile2
C)PTC
Mile2
eJPT — INE Security
eJPT
INE Security
PMPA — TCM Security
PMPA
TCM Security
CMPen-And — The SecOps Group
CMPen-And
The SecOps Group
C-AI/MLPen — The SecOps Group
C-AI/MLPen
The SecOps Group
CDFP — INE Security
CDFP
INE Security
Regulatory framework

We work within your jurisdiction

We tailor each engagement's scope and the handling of your data to the data protection law that applies to you, whether regional or GDPR when you operate globally. We don't issue certifications: we align our work with your framework and coordinate with your legal team.

LGPDBrazil
General Data Protection Law
LFPDPPPMexico
Federal Law on the Protection of Personal Data
Law 1581Colombia
Personal Data Protection Law
Law 29733Peru
Personal Data Protection Law
Law 25.326Argentina
Personal Data Protection Law
Law 21.719Chile
Personal Data Protection Law
LOPDPEcuador
Organic Law on Personal Data Protection
GDPREuropean Union
General Data Protection Regulation
Contact

Let’s talk about your exposure

Tell us what you need and we’ll get back to you within one business day with a scoping proposal. Active incident? Use our 24/7 response line.